Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: IBM Db2 for Linux, UNIX and Windows — ibm.com/support/pages/node/7010029 Clear all filters
TI-2023-12465 CVE-2023-27868 · GHSA-qw9f-547c-ppw4

IBM Db2 code execution

Priority MEDIUM 41

IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unchecked class instantiation when providing…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01628 Published 2023-07-08 No fix listed CWE-94
TI-2023-12464 CVE-2023-27867 · GHSA-6rh4-jr4q-29gx

IBM Db2 code execution

Priority MEDIUM 41

IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 could allow a remote authenticated attacker to execute arbitrary code via JNDI Injection.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01641 Published 2023-07-08 No fix listed CWE-94
TI-2023-12466 CVE-2023-27869 · GHSA-j8xr-8hjf-7jp2

IBM Db2 code execution

Priority MEDIUM 41

IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unchecked logger injection.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01628 Published 2023-07-08 No fix listed CWE-94